@vibeorm/adapter-bun 1.2.0 → 1.3.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibeorm/adapter-bun",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Bun-native database adapter for VibeORM using bun:sql",
   "license": "MIT",
   "keywords": [
@@ -33,7 +33,7 @@
     "bun": ">=1.1.0"
   },
   "dependencies": {
-    "@vibeorm/runtime": "1.2.0"
+    "@vibeorm/runtime": "1.3.0"
   },
   "publishConfig": {
     "access": "public"

package/src/index.ts

@@ -7,6 +7,7 @@
  */
 
 import type { DatabaseAdapter, QueryResult, TransactionOptions } from "@vibeorm/runtime";
+import { PgArray } from "@vibeorm/runtime";
 
 export type BunAdapterOptions = {
   /** PostgreSQL connection URL. Falls back to DATABASE_URL env var if not provided. */
@@ -387,12 +388,25 @@ export function bunAdapter(options?: BunAdapterOptions): DatabaseAdapter {
    * column writes that genuinely pass a JS array as a JSON value).
    */
   async function executeQuery(sql: SqlInstance, params: { text: string; values: unknown[] }): Promise<Record<string, unknown>[]> {
+    // Defence-in-depth: if any value is a runtime PgArray that slipped through
+    // (e.g. a caller bypassed `client.ts`'s formatArrayParam unwrap), convert
+    // it to the PG array literal string that bun:sql actually needs. The
+    // standard ORM path has already done this conversion via `formatArrayParam`,
+    // so the loop is a near-zero-cost guard for the normal case.
+    // Bug 3 — see .ai/bug-report-2026-05-24.md.
+    let values: unknown[] = params.values;
+    for (let i = 0; i < params.values.length; i++) {
+      if (params.values[i] instanceof PgArray) {
+        if (values === params.values) values = params.values.slice();
+        values[i] = toPgArrayLiteral((params.values[i] as PgArray).values);
+      }
+    }
     if (USE_PREPARED) {
       const strings = getOrCreateTemplate({ text: params.text });
-      const result = await sql(strings, ...params.values);
+      const result = await sql(strings, ...values);
       return result as Record<string, unknown>[];
     }
-    const result = await sql.unsafe(params.text, params.values);
+    const result = await sql.unsafe(params.text, values);
     return result as Record<string, unknown>[];
   }